Awudingi ifayela lesikhashana ukuze ukhiqize ukhiye we-OpenVPN

Ukubamba into yokhiye ememori kugwema umjikelezo wempilo wefayela, hhayi ukuphepha. Hlukanisa ukuphuma nokungalungi, bese ubheka ukhiye njengemfihlo ngemuva kwalokho.

Ukukhiqiza ukhiye akudingi ifayela lesikhashana, futhi ukweqa lona kulungisa okuncane kunalokho izincwadi eziningi ezisikisela. Okususayo umjikelezo wempilo wefayela kanye nokuncintisana kokuhlanza okuzungezile. Okungakuthinti yithuba ngalinye lokuthi imfihlo ivele ngemuva kwalokho. Inkinga yokulunga kulezi zikripthi ngokuvamile isendaweni enye, ngoba izinto zokuhlola kanye nento yokhiye zihamba emifudlaneni ehlukene.

Ifayela kwakungelona icala obucabanga ukuthi liyikho

Ifayela lesikhashana liyingozi eqondile uma lingafundwa yinoma ubani, uma liphila ngemuva kokuphahlazeka, noma uma isinyathelo sokuhlanza sidlulwa ngemuva kokungafani. Lokho kuyiqiniso, futhi kufanele kulungiswe. Futhi kuyasendaweni, kuyabonakala futhi kulula ukukuhlola. Shono ngakunye kusikripthi sakho ngaphambi kokuphetha ngokuthi ushintsho lwaluwukuhlotsha kuphela.

Izingozi ezithule kakhulu zisemfuleni ogezayo: ukhiye oprintiwe ngesikhathi sokulungisa, okungafani okufaka yonke into yomphumela ohlwini, isibambi sokuphahlazeka esibhala i-core dump, umqoqi wamalogi othola indlela yefayela bese ethola okuqukethwe. Ukugwema ifayela lesikhashana akusizi lutho kulezi, futhi ukukholelwa okunye yiyo indlela yokubhala kabusha okunenhloso enhle okushiya ngayo imfihlo ivele kakhulu kunakuqala. Thatha lolu shintsho njengokuthuthuka okukodwa ochungechungeni, hhayi njengokulungisa.

Ikhasimende libhala ini uma kunganikezwanga igama lefayela

Izinhlobo zamanje zekhasimende zithumela ukhiye okhiqiziwe ekuphumeni okujwayelekile uma umyalo wokhiye unikezwa ngaphandle kwendlela yokuphuma. Yikho lokhu kuziphatha okubhalwe phansi okwenza indlela yememori isebenze, futhi kususa isidingo seqhinga elidala lokubhekisa ithuluzi endleleni yedivayisi.

import subprocess
proc = subprocess.run(
    ["openvpn", "--genkey", "tls-crypt"],
    stdout=subprocess.PIPE,
    stderr=subprocess.PIPE,
    check=True,
)
key_material = proc.stdout

Dlulisa umyalo njengohlu. Akukho ukunwetshwa kwe-shell okudingekayo lapha, futhi ukuvula i-shell kungenza umngcele wezimpikiswano uncike ekuqotheni ongakulawuli. Sebenzisa isidlawulo esihlosiwe ngendlela ephelele uma isikripthi singasebenza ngomzila wokusesha ongafani nalowo oyilindele.

Ukuhlola ikhodi yokubuya kuvimbela indlela yempumelelo ekuqhubekeni ngemuva kokubiza okuhlulekile. Ngaphandle kwakho, umucu wamabhayithi ongenalutho ungaphuma uqhubeke futhi uhluleke kuphela isikhathi eside kamuva, lapho ukhiye usetshenziswa khona futhi umlayezo wephutha ungasaniki ngisho nokukhiqizwa.

Imifudlana emibili, izincazelo ezimbili

Ukuphuma okujwayelekile kuthwala ukhiye. Ukuphuma kwephutha kuthwala konke ithuluzi elifuna ukukutshela khona, kuhlanganise neziqwashiso mayelana nokuhlelwa, inguqulo kanye nohlobo lokhiye. Ukuqondisa kokubili kubhafa elilodwa kuyiphutha elikhiqiza ukhiye obonakala ufanele nekhasi elifakwe phakathi.

Gcina indlela yokwehluleka yahlukene futhi. Uma ubizo luhluleka, bika umyalo ohlulekile kanye nesimo sokuphuma, bese unquma ngamabomu ukuthi ingxenye ethile yokuphuma kwephutha iphephile yini ukuyikhombisa. Ukuthulula yonke into yomphumela kumalogi kuyindlela evamile futhi ingahamba nokhiye.

Ukufunda okuphephile kwensimbi kubalulekile uma kamuva uhlanganisa noma uqhathanisa into. Isimo sombhalo ngokubhalwa okungalindelekile kungashintsha amabhayithi okwakungamelwe abe umbhalo, futhi ukhiye oshintshile awuhlukaniseki nokhiye ongafanele kuze kuhluleke i-handshake.

Uma ngempela uyigcina, kwenze ngamabomu

Ukusetshenziswa okuningi ekugcineni kudinga ukhiye kudiski, kusango noma esitolo semifihlo. Kuwubhale kanye, ngezimvume eziqinile kusukela ekudalweni hhayi i-chmod kamuva, futhi wenze ukubhala kube okungahlukaniseki ukuze ifayela elingaphelele lingabi yilona elifundwa yisevisi lapho iqala. Ukuhlela kabusha kusuka endleleni ekuhla elifanayo ngokuvamile kwanele. Susa indlela yokugcina esigabeni sokwehluleka, ngoba ukubhala okuhlulekile yikho kanye ikhophi abantu abayikhohlwayo.

Setha isimo sefayela lapho ifayela lidaliwe, futhi gcina isimo sokuhla sinqunyelwe. Gwema noma iyiphi indlela engaphansi kwendawo umsebenzi wokugcina ayihlola ngokushesha, ngoba imfihlo ekugcineni kwasebusuku iyimfihlo kuyo yonke ikhophi yalokho kugcina. Ukucabanga okufanayo kuyasebenza kuvolyumu yabelwana abanye abasebenzi abangayifunda.

Ukhiye owabiwe awusona isazisi

Ukukhiqiza le nto akukhiphi isitifiketi, akubhalisi ikhasimende futhi akutholi ukuthi ubani oxhumayo. Ukhiye owabiwe uvikela umzila phakathi kwezinhlangothi esezethembana; isazisi sisavela esitifiketini kanye nakho konke ukuqinisekisa okuphambi kwesitifiketi.

Izinhlobo zokhiye nazo azishintshiseki. Ukhiye olinganayo wengxenye eyodwa awusiwo ukufaka esikhundleni kwenye, futhi izinguqulo ezintsha zinezakho ezihlukile ezinamafayela ahlukene ekugcineni ngakunye. Khiqiza uhlobo okuhlelwa kwakho okulushoyo ngokuqondile, bese ulusebenzisa endaweni eluchaza.

Hlola umphumela ngoxhumano lwangempela hhayi ngokubheka usayizi wefayela. Uma i-handshake iqeda futhi amalogi engabonisi ziqwashiso zokhiye, indlela yokukhiqiza ilungile; uma ukhiye wawunqanyulwa umfudlana ohlangene, uxhumano lwaluzohluleka ngendlela ekhomba umlingani hhayi isikripthi.

Izihloko ezihlobene